Job Description

Company overview:TraceLink's software solutions and Opus Platform help the pharmaceutical industry digitize their supply chain and enable greater compliance, visibility, and decision making. It reduces disruption to the supply of medicines to patients who need them, anywhere in the world.Founded in 2009 with the simple mission of protecting patients, today Tracelink has 8 offices, over 800 employees and more than 1300 customers in over 60 countries around the world. Our expanding product suite continues to protect patients and now also enhances multi-enterprise collaboration through innovative new applications such as MINT.Tracelink is recognized as an industry leader by Gartner and IDC, and for having a great company culture by Comparably.As part of the Security team, the Senior Product Security Engineer will support and advance the security of TraceLink's applications. Working closely with Product, Cloud Operations, Services, and others in the Security team, this role will focus on driving increased maturity of security-related processed throughout the SDLC. This individual will serve as a Security Subject Matter Expert for priority products, conducting security assessments (hacking), developing automation, improving processes, managing vulnerabilities discovered by tooling, maintaining automated tooling, and developing and delivering training.Responsibilitiesxe2x97x8f Provide guidance to teams on security best practices throughout the SDLC
xe2x97x8b Secure architectures and requirements
xe2x97x8b Threat modeling
xe2x97x8b Secure coding practices
xe2x97x8b Manual and automated code reviews
xe2x97x8b Analyze results from automated tools
xe2x97x8b Security assessments / white box testing
xe2x97x8f Join in regular security assessments of our products
xe2x97x8f Continually drive further maturity across TraceLink processes
xe2x97x8f Support efforts to address identifies security issues
xe2x97x8f Assist with maintaining, operating, and optimizing security testing tools such as SAST, SCA, and DAST
xe2x97x8f Maintain a high expertise level of the application security landscape and new threat vectors
xe2x97x8f Develop and support security needs of TraceLink's partner programSkills and Qualificationsxe2x97x8f 8 years experience with securing cloud-native applications
xe2x97x8f 4 years experience with the application of threat modeling or other risk identification techniques
xe2x97x8f Strong knowledge of Application Security testing tools
xe2x97x8f Expert knowledge of OWASP Top 10, including avoidance and remediation techniques
xe2x97x8f Experience in remediating complex enterprise-level security issues
xe2x97x8f Strong knowledge of secure coding practices in both Java and JavaScript/NodeJS
xe2x97x8f Experience working with Agile/Scrum development methodology
xe2x97x8f Development experience with Java to maintain and enhance internal tooling
xe2x97x8f Experience automating tasks and analysis
xe2x97x8f Strong analytical and problem solving skills
xe2x97x8f Strong verbal and written communication skills
xe2x97x8f Knowledge of microservices architecture and supporting technologies
xe2x97x8f Bachelor's degree or equivalent experience in Computer Science, Information Systems Security, or related field
xe2x97x8f CISSP, CCSP, CEH, CSSLP, CKS, AWS Security, OffSec, SANS Security, and other industry and vendor-specific security certificationsPlease see the for more information on how Tracelink processes your personal information during the recruitment process and, if applicable based on your location, how you can exercise your privacy rights. If you have questions about this privacy notice or need to contact us in connection with your personal data, including any requests to exercise your legal rights referred to at the end of this notice, please contact .

TraceLink